elddy/Windows-NTAPI-Injector external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

elddy/Windows-NTAPI-Injector

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/elddy/Windows-NTAPI-Injector)

Close

elddy / Windows-NTAPI-InjectorView on GitHubMore

• External links
• Readme badge

Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses

☆40Dec 9, 2020Updated 5 years ago

Alternatives and similar repositories for Windows-NTAPI-Injector

Users that are interested in Windows-NTAPI-Injector are comparing it to the libraries listed below

• x0reaxeax / SyscallHookBypass

  View on GitHub
  NTAPI hook bypass with (semi) legit stack trace
  ☆19May 9, 2023Updated 2 years ago
• oXis / DoublePulsarPayload

  View on GitHub
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆31Nov 9, 2021Updated 4 years ago
• timwhitez / JmpUnhook

  View on GitHub
  Ntdll Unhooking POC
  ☆19Aug 12, 2022Updated 3 years ago
• freakanonymous / DLL_ROOTKIT_loader

  View on GitHub
  Rootkit loader for your rootkit dll, x86/x64 system wide DLL injection (+appinit_dlls registry create) uses heavens gate
  ☆22Jan 28, 2021Updated 5 years ago
• sv3nbeast / ImgLoaderShellCode

  View on GitHub
  ☆36Sep 7, 2020Updated 5 years ago
• 5h3r10ck / antivirus-evasion

  View on GitHub
  Applying some AV evasion techniques on a metasploit reverse shell
  ☆18Nov 12, 2020Updated 5 years ago
• whydee86 / FUD-ShellCode-UUID

  View on GitHub
  Making Shellcode fully undetectable using uuid
  ☆23May 7, 2021Updated 4 years ago
• ntestoc3 / bypassAV

  View on GitHub
  ☆16May 14, 2021Updated 4 years ago
• slyd0g / XORShellcodeLoader

  View on GitHub
  Loads shellcode from a resource file.
  ☆22Aug 15, 2019Updated 6 years ago
• jlvsjp / WinPwdStealer

  View on GitHub
  Get/dump chrome and firefox saved passwords.
  ☆20Sep 13, 2020Updated 5 years ago
• WangYihang / XorShellcode

  View on GitHub
  Shellcode异或加密工具
  ☆12Mar 23, 2017Updated 8 years ago
• helloobaby / Babuk

  View on GitHub
  Babuk v2
  ☆11Sep 28, 2021Updated 4 years ago
• HadesW / HttpRAT

  View on GitHub
  HTTPS GET RAT and Memory Loader
  ☆26Jun 10, 2025Updated 8 months ago
• kouzhudong / libnet

  View on GitHub
  windows user mode network library
  ☆12Jan 13, 2026Updated last month
• SimonZhong2025 / Waste-Self-Rescue-Scheme

  View on GitHub
  废物自救项目！一起向光而行！！！
  ☆11May 7, 2022Updated 3 years ago
• hktalent / dht

  View on GitHub
  BitTorrent DHT Protocol && DHT Spider，faster than shiyanhui/dht
  ☆12Aug 30, 2023Updated 2 years ago
• redteamertips / DinvokeDupetokenAndThreadSwitcheroo

  View on GitHub
  ☆26May 22, 2021Updated 4 years ago
• bats3c / DefensiveInjector

  View on GitHub
  Shellcode injector using direct syscalls
  ☆123Aug 17, 2020Updated 5 years ago
• idiotc4t / Schrodinger-s-Cat

  View on GitHub
  Shellcode antivirus evasion framework
  ☆27Jan 16, 2021Updated 5 years ago
• forrest-orr / phantom-dll-hollower-poc

  View on GitHub
  Phantom DLL hollowing PoC
  ☆370May 23, 2022Updated 3 years ago
• OlivierLaflamme / DNSWho

  View on GitHub
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Jan 19, 2021Updated 5 years ago
• aaaddress1 / wowInjector

  View on GitHub
  PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)
  ☆167May 27, 2021Updated 4 years ago
• Snowming04 / InjectProcess

  View on GitHub
  寻找可注入进程
  ☆13Jul 16, 2020Updated 5 years ago
• RomaneeSean / xss-flash-fishing

  View on GitHub
  ☆17Oct 4, 2020Updated 5 years ago
• HollyDi / Ring0Hook

  View on GitHub
  ☆12Aug 28, 2017Updated 8 years ago
• StudyCat404 / uuid_exec_shellcode

  View on GitHub
  uuid-shellcode-execution
  ☆13May 9, 2021Updated 4 years ago
• crazyHH / ExplorerPassword

  View on GitHub
  获取浏览器保存密码，支持IE、Chrome和火狐
  ☆12Oct 30, 2019Updated 6 years ago
• x0reaxeax / Fetch-n-Exec

  View on GitHub
  An x64 binary executing code that's not inside of it.
  ☆17Feb 28, 2023Updated 2 years ago
• waleedassar / CVE-2022-24483

  View on GitHub
  POC For CVE-2022-24483
  ☆14Apr 12, 2022Updated 3 years ago
• Mantraufo / Kanoninjector

  View on GitHub
  Runpe + DInvoke + Syscall
  ☆16Jun 18, 2021Updated 4 years ago
• li-xiao-qing / hpsocket-demo

  View on GitHub
  基于 HP-Socket 实现的 Client / Server
  ☆15Jan 4, 2024Updated 2 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp

  View on GitHub
  Load shellcode via syscall
  ☆56Jul 28, 2021Updated 4 years ago
• boku7 / AsmHalosGate

  View on GitHub
  x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks
  ☆235Mar 8, 2023Updated 2 years ago
• Kara-4search / PEB-PPIDspoofing_Csharp

  View on GitHub
  Command line & PPID spoofing
  ☆29Apr 15, 2023Updated 2 years ago
• thesnoom / extps-cobalt-strike-bof

  View on GitHub
  Extended Process List (Search functionality)
  ☆29Jan 23, 2021Updated 5 years ago
• inspiringz / fofa

  View on GitHub
  一款 Go 语言编写的小巧、简洁、快速采集 fofa 数据导出到 Excel 表单的小工具。
  ☆33Mar 16, 2023Updated 2 years ago
• TheKevinWang / HellsRunPE

  View on GitHub
  RunPE using Hell's Gate technique.
  ☆32Dec 4, 2020Updated 5 years ago
• zha0 / BloodyAv

  View on GitHub
  BloodyAv is Custom Shell Code loader to Bypass Av and Edr.
  ☆14Mar 21, 2022Updated 3 years ago
• marywangran / TCP-Rootkit

  View on GitHub
  Hide your tcp connection！！！
  ☆12Apr 8, 2020Updated 5 years ago